CVE-2026-65400KEV · OVERDUECWE-287

Apple macOS Improper Authentication Vulnerability

Critical · published August 7, 2026

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 77.3th percentile for exploit probability.

64
days past CISA
deadline
CVSS v3.1
9.8
EPSS
2%
Percentile
77.3
In the wild
Confirmed
What it is

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01723 · 77.3th percentile
Weakness
CWE-287 · Improper Authentication
Published
2026-08-07T02:18Z
KEV added
2026-08-18 · due 2026-08-21
Affected products (3)
ProductVersionsFixed in
apple/macos≥ 14.0, < 14.8.914.8.9
apple/macos≥ 15.0, < 15.7.915.7.9
apple/macos≥ 26.0, < 26.6.126.6.1
References (9)
http://seclists.org/fulldisclosure/2026/Aug/36 · af854a3a-2127-422b-91ae-364da2661108http://seclists.org/fulldisclosure/2026/Aug/37 · af854a3a-2127-422b-91ae-364da2661108https://advisories.ncsc.nl/2026/ncsc-2026-0280.html · 134c704f-9b21-4f2e-91b3-4a467353bcc0https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65400 · 134c704f-9b21-4f2e-91b3-4a467353bcc0https://support.apple.com/en-us/148170 · [email protected]https://support.apple.com/en-us/148171 · [email protected]https://support.apple.com/en-us/148172 · [email protected]https://support.apple.com/en-us/149035 · [email protected]https://support.apple.com/en-us/149042 · [email protected]
EPSS history
Timeline
  • 06 AUG 18:17Z
    An authentication issue was addressed with improved state management
    cvelistv5